{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.0"}],"component":"sqlite-mcp","cve_ids":["CVE-2026-7206"],"ecosystem":"PyPI","epss":0.00277,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4j28-22qp-rjcf","id":"tcs_01M5KH38VXK4Q38A42ZVK5RJNQ","modified_at":"2026-07-13T16:33:12.405621289Z","published_at":"2026-07-13T15:02:54.477886Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3074","https://nvd.nist.gov/vuln/detail/CVE-2026-7206","https://github.com/dubydu/sqlite-mcp/issues/1","https://github.com/dubydu/sqlite-mcp/pull/2","https://github.com/dubydu/sqlite-mcp/commit/a5580cb992f4f6c308c9ffe6442b2e76709db548","https://github.com/dubydu/sqlite-mcp","https://vuldb.com/submit/802081","https://vuldb.com/vuln/359806","https://vuldb.com/vuln/359806/cti","https://pypi.org/project/sqlite-mcp","https://github.com/advisories/GHSA-4j28-22qp-rjcf"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-3074","url":"https://osv.dev/vulnerability/PYSEC-2026-3074"}],"summary":"sqlite-mcp has an Injection issue"}